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Abstract 



I study the class of problems efficiently solvable by a quantum computer, given the ability to "postselect" 
^ , on the outcomes of measurements. I prove that this class coincides with a classical complexity class called 

PP, or Probabilistic Polynomial-Time. Using this result, 1 show that several simple changes to the axioms 
of quantum mechanics would let us solve PP-complete problems efficiently. The result also implies, as an 
easy corollary, a celebrated theorem of Beigel, Reingold, and Spielman that PP is closed under intersection, 
as well as a generalization of that theorem due to Fortnow and Reingold. This illustrates that quantum 
computing can yield new and simpler proofs of major results about classical computation. 
Keywords: quantum computing, computational complexity, postselection. 
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Postselection is the power of discarding all runs of a computation in which a given event does not occur. To 
illustrate, suppose we are given a Boolean formula in a large number of variables, and we wish to find a setting 
of the variables that makes the formula true. Provided such a setting exists, this problem is easy to solve 
using postselection: we simply set the variables randomly, then postselect on the formula being true. 
P-i. This paper studies the power of postselection in a quantum computing context. I define a new complexity 

class called PostBQP (Postselected Bounded-Error Quantum Polynomial-Time), which consists of all problems 
solvable by a quantum computer in polynomial time, given the ability to postselect on a measurement yielding 
a specific outcome. The main result is that PostBQP equals the well-known classical complexity class PP 
q-i (Probabilistic Polynomial-Time). Here PP is the class of problems for which there exists a probabilistic 
polynomial-time Turing machine that accepts with probability at least 1/2 if and only if the answer is 'yes.' 
For example, given a Boolean formula, a PP machine can decide whether the majority of settings to the 
variables make the formula true. Indeed, this problem turns out to be PP-complete (that is, among the 
hardest problems in PP). 1 

The motivation for the PostBQP = PP result comes from two quite different sources. The original 
motivation was to analyze the computational power of "fantasy" versions of quantum mechanics, and thereby 
gain insight into why quantum mechanics is the way it is. In particular, Section^Jwill show that if we changed 
the measurement probability rule from \ip\ 2 to \tp\ p for some p ^ 2, or allowed linear but nonunitary evolution, 
then we could simulate postselection, and thereby solve PP-complete problems in polynomial time. If we 
consider such an ability extravagant, then we might take these results as helping to explain why quantum 
mechanics is unitary, and why the measurement rule is IV'I 2 - 

A related motivation comes from an idea that might be called anthropic computing — arranging things so 
that we are more likely to exist if a computer produces a desired output than if it does not. As a simple 
example, under the many-worlds interpretation of quantum mechanics, we might kill ourselves in all universes 

*Part of this work was done while I was a graduate student at the University of California, Berkeley, CA (USA), supported 
by an NSF Graduate Fellowship. 

^ee the "Complexity Zoo" (www.complexityzoo.com) for more information about the complexity classes mentioned in this 
paper. 
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where a computer fails! My result implies that, using this "technique," we could solve not only NP-complete 
problems efficiently, but PP-complctc problems as well. 

However, the PostBQP = PP result also has a more unexpected implication. One reason to study quantum 
computing is to gain a new, more general perspective on classical computer science. By analogy, many famous 
results in computer science involve only deterministic computation, yet it is hard to imagine how anyone could 
have proved these results had researchers not long ago "taken aboard" the notion of randomness. 2 Likewise, 
taking quantum mechanics aboard has already led to some new results about classical computation |H I9"l l241 12*5) . 
What this paper will show is that, even when classical results are already known, quantum computing can 
sometimes provide new and simpler proofs for them. 

When Gill ^JEH defined PP in 1972, he also asked a notorious question that remained open for eighteen 
years: is PP closed under intersection? 3 In other words, given two probabilistic polynomial-time Turing 
machines A and B, does there exist another such machine that accepts with probability greater than 1/2 if 
and only if A and B both do? The question was finally answered in the affirmative by Beigel, Reingold, and 
Spiclman |llj . who introduced a brilliant technique for representing the logical AND of two majority functions 
by the sign of a low-degree rational function. Fortnow and Reingold JJj later extended the technique to show 
that PP is closed under "polynomial-time truth-table reductions." This means that a polynomial-time Turing 
machine that makes nonadaptive queries to a PP oracle is no more powerful than PP itself. 4 

Now the class PostBQP is trivially closed under intersection, as well as under polynomial-time truth-table 
reductions. So the fact that PostBQP = PP immediately implies the Beigel et al. ^U] and Fortnow-Reingold 
[T7| results. Indeed, it even implies that PP is closed under quantum polynomial-time truth-table reductions, 
which seems to be a new result. I should emphasize that the PostBQP = PP proof is about one page long, 
and does not use rational functions or any other heavy-duty mathematics. 5 

This paper is based on chapter 15 of my PhD thesis [3J. Some of the results appeared in preliminary form 
in pQ, before I made the connection to showing PP closed under intersection. 

2 Related Work 

Besides PostBQP, several other "nondeterministic" versions of BQP have appeared in the literature. Adleman, 
DeMarrais, and Huang jS] defined NQP to be the class of problems for which there exists a polynomial-time 
quantum algorithm that accepts with nonzero probability if and only if the answer is 'yes.' Then, in a result 
reminiscent of this paper's, Fenner et al. 15 showed that NQP equals a classical class called coC = P. 6 Also, 
Watrous (33J defined QMA as the class of problems for which a polynomial-time quantum verifier can be 
convinced of a 'yes' answer by a polynomial-size quantum proof. If we require the proof to be classical, then 
we obtain the apparently weaker class QCMA, defined by Aharonov and Naveh [5]. Note that all of these 
classes are contained in PP, and hence in PostBQP. 

The idea of postselection has recurred several times in quantum computing. For example, Terhal and Di- 
Vincenzo used postselection to show that constant-depth quantum circuits are probably hard to simulate, 
and I [2] used it to show that BQP/qpoly C PP/poly (that is, any problem solvable in BQP with polynomial-size 
quantum advice, is also solvable in PP with polynomial-size classical advice). 

If we add postselection to a classical probabilistic polynomial-time Turing machine, then we obtain a 
complexity class known as BPP pat h, which was defined by Han, Hemaspaandra, and Thierauf |22| and which 
sits somewhere between MA and PP (MA being a probabilistic generalization of NP). 

Fortnow ^H] reports that in 1990, he, Fenner, and Kurtz tried to show PP closed under intersection by 
(1) defining a seemingly weaker class, (2) showing that class closed under intersection, and then (3) showing 
that it actually equals PP. The attempt failed, and soon thereafter Beigel et al. JGK succeeded with a quite 
different approach. This paper could be seen as a vindication of Fortnow et al. 's original approach — all it was 

2 A few examples are primality testing in deterministic polynomial time undirected graph connectivity in log-space \'2S)\ . 
and inapproximability of the 3-SAT problem unless P = NP 1311 . 

3 It is clear that PP is closed under complement, so this question is equivalent to asking whether PP is closed under union. 

4 A query is "nonadaptive" if it does not depend on the answers to previous queries. Beigel I1UI has given evidence that the 
Fortnow-Reingold result does not generalize to adaptive queries. 

5 Although, as pointed out to me by Richard Beigel, a result on rational functions similar to those in |1 1 1 could be extracted 
from my result. 

6 Unfortunately, I do not know of any classical result that this helps to prove. That coC = P is closed under union and 
intersection is obvious. 
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missing was quantum mechanics! Admittedly, Li 25J gave another proof along Fortnow et al.'s lines in 1993. 
However, Li's proof makes heavy use of rational functions, and seems less intuitive than the one here. 

3 The Class PostBQP 

In what follows, I assume basic familiarity with quantum computing, and in particular with the class BQP 
(Bounded-Error Quantum Polynomial Time) defined by Bernstein and Vazirani |12| . It is now time to define 
PostBQP more formally. 

Definition 1 PostBQP is the class of languages L C {0, 1}* for which there exists a uniform 7 family of 
polynomial- size quantum circuits {C n } n>1 such that for all inputs x, 

(i) After C n is applied to the state |0 • • • 0) ® \x) , the first qubit has a nonzero probability of being measured 
to be 

(ii) If x € L, then conditioned on the first qubit being |1) , the second qubit is |1) with probability at least 2/3. 
(Hi) If x ^ L, then conditioned on the first qubit being |1) , the second qubit is |1) with probability at most 1/3. 

It is immediate that NP C PostBQP. Also, to show PostBQP C PP, we can use the same observations 
used by Adleman, DeMarrais, and Huang [5] to show that BQP C PP, but sum only over paths where the first 
qubit is |1) at the end. In more detail: 

Proposition 2 PostBQP C PP. 

Proof. By a result of Shi [3U| , we can assume without loss of generality that our quantum circuit is composed 
of Hadamard and Toffoli gates. 8 Then the final amplitude a z of each basis state \z) can be written as a 
sum of exponentially many contributions, call them a x> i, . . . ,a z .N, each of which is a rational real number 
computable in classical polynomial time. So the final probability of \z) equals 

a 2 z = (dz,i H h a z ,„) 2 = 2J a z ^a z j. 

ii 

We need to test which is greater: the sum Sq of a 2 z over all z beginning with 10, or the sum S\ of a 2 z over all 
z beginning with 11. But we can do this in PP: we simply put the positive contributions a z ^a Zi j to Si and 
negative contributions to So on "one side of the ledger," and the negative contributions to Si and positive 
contributions to Sq on the other side. ■ 

How robust is PostBQP? Just as Bernstein and Vazirani showed that intermediate measurements do 
not increase the power of ordinary quantum computers, so it is easily shown that intermediate postselection 
steps do not increase the power of PostBQP. Whenever we want to postselect on a qubit j being |1), we simply 
apply a CNOT gate from j into a fresh ancilla qubit that is initialized to |0) and that will never be written to 
again. Then, at the end, we compute the AND of the ancilla qubits, and swap the result into the first qubit. 
By a standard Chernoff bound, it follows that we can repeat a PostBQP computation a polynomial number 
of times, and thereby reduce the error probability from 1/3 to 1 — 2~ p (") for any polynomial p. 

A corollary of the above observations is that PostBQP has strong closure properties. 

Proposition 3 PostBQP is closed under union, intersection, and complement. Indeed, it is closed under BQP 
truth-table reductions, meaning that PostBQP = BQPj^J^j^, where BQP^jjj^f^j is the class of problems 
solvable by a BQP machine that can make a polynomial number of nonadaptive classical queries to a PostBQP 
oracle. 

7 Here 'uniform' means that there exists a classical algorithm that outputs a description of Cn in time polynomial in n. 
8 This is true even for a postselected quantum circuit, since by the Solovay-Kitaev Theorem 1251 . we can achieve the needed 
accuracy in amplitudes at the cost of a polynomial increase in circuit size. 
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Proof. Clearly PostBQP is closed under complement, since the definition is symmetric with respect to x E L 
and x ^ L. For closure under intersection, let L\, L2 E PostBQP; then we need to decide whether x E L\ r\Li- 
Run amplified computations (with error probability at most 1/6) to decide if x £ L\ and if x E L%, postselect 
on both computations succeeding, and accept if and only if both accept. It follows that PostBQP is closed 
under union as well. 
In general, suppose a 

B Q R t|°ci^i P cai machine M submits queries qi, . . . , q p ( n ) to the PostBQP oracle. Then 
run amplified computations (with error probability at most, say, 10 p^ ) to decide the answers to these queries, 
and postselect on all p (n) of them succeeding. By the union bound, if M had error probability e with a 
perfect PostBQP oracle, then its new error probability is at most e+ 1/10, which can easily be reduced through 
amplification. ■ 

One might wonder why Proposition does not go through with adaptive queries. The reason is subtle: 
suppose we have two PostBQP computations, the second of which relies on the output of the first. Then 
even if the first computation is amplified a polynomial number of times, it still has an exponentially small 
probability of error. But since the second computation uses postselection, any nonzero error probability could 
be magnified arbitrarily, and is therefore too large. 

I now prove the main result. 

Theorem 4 PostBQP = PP. 

Proof. We have already observed that PostBQP C PP. For the other direction, let / : {0, 1}" — > {0, 1} be an 

efficiently computable Boolean function, and let s = \{x : f (x) — 1}|. Then we need to decide in PostBQP 

whether s < 2 n ~ 1 or s > 2 n ~ 1 . (As a technicality, we can guarantee using padding that s > 0.) 

The algorithm is as follows: first prepare the state 2 - ™/ 2 J2xe{o 1}™ \ x ) \f( x ))- Then following Abrams 

and Lloyd |S] , apply Hadamard gates to all n qubits in the first register and postselect 9 on that register being 
|0)«"\ Thig produces the state 1 0)®" |^ w here 

\J (2™ - sf + s 2 

Next, for some positive real numbers a, (3 to be specified later, prepare a |0) + f3 11) H where 

/T72(2") |0) + ^/T/2(2 n - 2s) |1) 



H\il>) 



^(2"- S f + s 2 



is the result of applying a Hadamard gate to Then postselect on the second qubit being |1). This yields 

the reduced state 

as |0) +/3 A /r/2(2™-2s)|l) 



^a 2 s 2 + (f3 2 /2) (2™ -2s) 2 



in the first qubit. 

Suppose s < 2"~ 1 , so that s and \/l/2 (2" — 2s) are both at least 1. Then we claim there exists an integer 
i E [— n,n] such that, if we set /3/a = 2 1 , then jv^) 1S close to the state |+) = (|0) + |1)) j\pl: 

|(+|^)|>i±^> 0.985. 

For since y/l/2 (2" — 2s) /s lies between 2~ n and 2™, there must be an integer i E [—n,n — 1] such that 
\tf2 l ) an d I v?2 i + 1 ) f au °n opposite sides of |+) in the first quadrant (see Figure^). So the worst case is that 
{+\<p 2 i) = (+|^2«+i) 5 which occurs when \tp#) = ^/2~jl |0) + ^f\Jl |0) and |^ 2 '+i) = v / V3 |0) + ^/2~Jl |0>. On 
the other hand, suppose s > 2™ _1 , so that Wl/2 (2" — 2s) < 0. Then |y?2*) never lies in the first or third 
quadrants, and therefore K+I^OI — 1/V2 < 0.985. 

9 Postselection is actually overkill here, since the first register has at least 1/4 probability of being |0)®". 
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Figure 1: If s and 2™ — 2s are both positive, then as we vary the ratio of (3 to a, we eventually get close to 
1+) = (|0) + /v 7 ^ (dashed lines). On the other hand, if 2™ — 2s is not positive (dotted line), then we never 
even get into the first quadrant. 



It follows that, by repeating the whole algorithm n (2n + 1) times (as in Proposition^, with n invocations 
for each integer i G [— n, n], we can learn whether s < 2™ _1 or s > 2 n ~ 1 with exponentially small probability 
of error. ■ 

Combining Proposition [21 with Theorem ^immediately yields that PP is closed under intersection, as well 
as under BQP truth-table reductions. 

4 Fantasy Quantum Mechanics 

Is quantum mechanics an island in theoryspace? By "theoryspace," I mean the space of logically conceivable 
physical theories, with two theories close to each other if they differ in few respects. An "island" in theoryspace 
is then a natural and interesting theory, whose neighbors are all somehow perverse or degenerate. The 
Standard Model is not an island, because we do not know of any compelling (non-anthropic) reason why the 
masses and coupling constants should have the values they do. Likewise, general relativity is probably not 
an island, because of alternatives such as the Brans-Dicke theory. 

To many physicists, however, quantum mechanics does seem like an island: change any one aspect, and 
the whole theory becomes inconsistent or nonsensical. There are many mathematical results supporting this 
opinion: for example, Gleason's Theorem [2] and other "derivations" of the l^l 2 probability rule |14l I84| : 
arguments for why amplitudes should be complex numbers, as opposed to (say) real numbers or quaternions 
1131 |23I ; and "absurd" consequences of allowing nonlinear transformations between states [SJ |201 I2ZI ■ The 
point of these results is to provide some sort of explanation for why quantum mechanics has the properties it 
does. 

In 1998, Abrams and Lloyd suggested that computational complexity could also be pressed into such an 
explanatory role. In particular, they showed that under almost any nonlinear variant of quantum mechanics, 
one could build a "nonlinear quantum computer" able to solve NP-complete and even #P-complete problems 
in polynomial time. 10 One interpretation of their result is that we should look very hard for nonlinearities 
in experiments! But a different interpretation, the one I prefer, is that their result provides independent 
evidence that quantum mechanics is linear. 

This section builds on Theorem 01 to offer similar "evidence" that quantum mechanics is unitary, and that 
the measurement rule is \tp\ . 

10 A caveat is that it remains an open problem whether this can be done fault-tolerantly. The answer might depend on the 
allowed types of nonlinear gate. On the other hand, if arbitrary 1-qubit nonlinear gates can be implemented without error, then 
even PSPACE-complete problems can be solved in polynomial time. This is tight, since nonlinear quantum computers are not 
hard to simulate in PSPACE. 
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Let BQP nu be the class of problems solvable by a uniform family of polynomial-size, bounded-error quantum 
circuits, where the circuits can consist of arbitrary 1- and 2-qubit invertible linear transformations, rather than 
just unitary transformations. Immediately before a measurement, the amplitude a x of each basis state \x) is 

divided by \Jj2 y \ a v\ 2 to normalize it. 
Proposition 5 BQP nu = PP. 

Proof. The inclusion BQP nu C PP follows easily from Adleman, DeMarrais, and Huang's proof that BQP C PP 
jS], which does not depend on unitarity. For the other direction, by Theorem 0] it suffices to show that 
PostBQP C BQP nu . To postselect on a qubit being |1), simply apply the 1-qubit nonunitary operation 

2-«(») o 
1 

for some sufficiently large polynomial q. ■ 

Next, for any nonnegative real number p, define BQP p similarly to BQP, except that when we measure, 
the probability of obtaining a basis state \x) equals \a x \ p fYly \ a v\ P rather than \a x \ 2 . Thus BQP 2 = BQP. 
Assume that all gates are unitary and that there are no intermediate measurements, just a single standard-basis 
measurement at the end. 

Theorem 6 PP C BQP p C PSPACE for all constants p^2, with BQP p = PP when p G {4, 6, 8, . . .}. 

Proof. To simulate PP in BQP p , run the algorithm of Theorem 0] having initialized O (n 2 q (n) / |2 — p|) 
ancilla qubits to |0) for some sufficiently large polynomial q. Suppose the algorithm's state at some point is 
J2 Z a z \z), and we want to postselect on the event \z) £ S, where S is a subset of basis states. Here is how: 
if p < 2, then apply Hadamard gates to K — 2q (n) / (2 — p) fresh ancilla qubits conditioned on \z) G S. The 
result is to increase the "probability mass" of each \z) G S from \a z \ p to 



2 K 



2 -K,2 t 



= 2 ( 2 -p) K / 2 \a z \ p = 2^\a z \ p , 



while the probability mass of each \z) (ji S remains unchanged. Similarly, if p > 2, then apply Hadamard 
gates to K — 2q{n) j (p — 2) fresh ancilla qubits conditioned on \z) ^ S. This decreases the probability 
mass of each \z) ^ S from \a z \ p to 2 K ■ \2~ K / 2 a z \ — 2~ q( - n ) \a z \ p , while the probability mass of each \x) G S 
remains unchanged. The final observation is that Theorem 01 still goes through if p ^ 2. For it suffices to 
distinguish the case |(+|</?2 i )l > 0.985 from |(+|y>2')l — l/v^2 with exponentially small probability of error, 
using polynomially many copies of the state |<^2 i )- But we can do this for any p, since all \ip\ p rules behave 
well under tensor products (in the sense that \otfl\ p — |/3| p ). 

The inclusion BQP p C PSPACE follows easily from the techniques used by Bernstein and Vazirani to 
show BQP C PSPACE. Let S be the set of accepting states; then simply compute J2 z eS \ a z\ P an( ^ E 2 ^s \ a z\ P 
and see which is greater. 

To simulate BQP p in PP when p G {4,6,8,...}, we generalize the result of Adleman, DeMarrais, and 
Huang [Sj, which handled the case p = 2. As in Proposition [21 we can write each amplitude a z as a sum of 
exponentially many contributions, a Zi i + • ■ • + a z ,N, where each a Z) , is a rational real number computable in 
classical polynomial time. Then letting S be the set of accepting states, it suffices to test whether 

£ki p = £^ 



z€S BC{l,...,N},\B\=pi£B 



is greater than Xiz^s l a z| P - We can do this in PP by separating out the positive and negative contributions 
riies a z,ii exactly as in Proposition [21 ■ 
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5 Open Problems 



What other classical complexity classes can we characterize in quantum terms, and what other questions can 
we answer by that means? A first step might be to prove even stronger closure properties for PP. For 
example, let BQP|j >ostBC?p be the class of problems solvable by a BQP machine that can make a single quantum 

query, which consists of a list of polynomially many questions for a PostBQP oracle. Then does BQP PostBC!P 
equal PostBQP? The difficulty in showing this seems to be uncomputing garbage qubits after the PostBQP 
oracle is simulated. 

Also, can we use Theorem0]to give a simple quantum proof of Beigel's result ^U] that P NP <jL PP relative 
to an oracle? 

As for fantasy quantum mechanics, an interesting open question is whether BQP p = PP for all nonnegative 
real numbers p ^ 2. A natural idea for simulating BQP p in PP would be to use a Taylor series expansion for 
the probability masses |aa;| p . Unfortunately, I have no idea how to get fast enough convergence. 
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